INFORMATION NOTE ON THE PROCESSING OF PERSONAL DATA BY ÖKSÜT MADENCİLİK SANAYİ VE TİCARET ANONİM ŞİRKETİ

Öksüt Madencilik Sanayi ve Ticaret Anonim Şirketi (hereinafter referred to as “the Company” or “our Company”) pays utmost attention to protect the personal data of individuals in all processes to which they subjected. With this in mind, the personal data of the individuals who has established a communication or relationship with the Company in anyway whatsoever, are processed and protected pursuant to the Turkish Law No. 6698 on the Protection of Personal Data (“KVKK”). The Company, acting as the “Data Controller”, processes and protects the personal data of the persons concerned in full compliance with the legislation, as required by law and as explained below.

1. Identity Information of the Data Controller

As described below, our Company processes personal data in accordance with the law and through administrative departments of the Company in order to carry out its activities. The Data Controller of any personal data processed by the Company's departments is the legal entity “Öksüt Madencilik Sanayi ve Ticaret Anonim Şirketi”.

2. Purpose of Personal Data Processing

While operating within the scope of its founding and trading purpose in accordance with the provisions stipulated by the Turkish Commercial Code No. 6102, the Company processes personal data in order to maintain its operations in the best possible manner in accordance with the legislation, the nature of its business and the customs and practices. The Company's administrative departments process the personal data of the persons and companies with whom/which the Company has commercial relations as well as its employees, job candidates and visitors in accordance with Articles 5 and 6 of the KVKK to sustain the activities of the Company, particularly its commercial and advertising activities, and to follow up those activities, collect the data required by law and use the data in accordance with its activities.

The primary objective of processing the personal data is to ensure that the concerned persons can utilize the services offered by the Company in the best way possible, to set and implement the Company's strategies and objectives, to ensure implementation of the Company's human resources policies, and ultimately to ensure that the rights of individuals who have a relation with the Company are protected as required by law.

3. Transfer of Personal Data

In order to ensure the best use of the services offered by the Company, to set and implement the Company's strategies and objectives, to carry out the Company's human resources policies and ultimately to protect the rights of individuals who have a relation with the Company as required by law, the personal data collected may be transferred the Company's business partners & affiliates, legally authorized public institutions, natural persons and others, within the framework of the personal data processing terms and purposes set out in Articles 8 and 9 of the Law No. 6698.

4. Method of and Legal Grounds for Collecting the Personal Data

Personal data is collected in any oral, written or electronic form and in accordance with the legislation in order to ensure that the services offered by the Company are provided in the best way possible for the purposes and principles stated above and that the Company properly fulfills its contractual, legal and customary obligations in this context. The personal data collected lawfully for the aforementioned legal grounds may also be processed and transferred for the purposes specified in Articles 1 and 2 of the “Information Note” herein within the scope of the personal data processing terms and purposes outlined in Articles 5 and 6 of the KVKK.

5. Rights of Personal Data Owners

Pursuant to the relevant provision of the Law, everybody is entitled to consult the Data Controller to;

1. Learn whether or not the personal data has been processed,
2. Request information if personal data has been processed,
3. Learn about the purpose of processing personal data and whether they are used in accordance with the intended purpose,
4. Enlighten about the third parties to whom personal data has been transferred in Türkiye or abroad,
5. Request for the correction of personal data in case of incomplete or incorrect processing,
6. Request for the deletion or destruction of the personal data in accordance with the terms & conditions stipulated in Article 7,
7. Request that the transactions performed in accordance with subclauses (e) and (f) be notified to the third parties to whom the personal data have been transferred,
8. Object to any consequences that may arise against the person as a result of the analysis of the processed data exclusively through automated systems,
9. Request for damages in cases where the data owner incur damage due to unlawful processing of the personal data.

In cases where personal data owners submit a request regarding their rights to the Company in the following ways stipulated by the legislation, the Company shall finalize the request free of charge as soon as possible and at the latest within 30 (thirty) days, in accordance with the law and the nature of the request pursuant to Article 13 of the KVKK. However, if such transaction brings extra costs, the fee in the tariff established by the Personal Data Protection Board may be imposed.

Personal data owners can submit to the Company their requests regulated by KVKK and indicated in this text in writing or by other methods to be determined by the Board.

The concerned personal data owners can submit us the aforementioned legal claims and requests written, registered mail with acknowledgement of receipt or by the agency of notary public at“Gaziosmanpaşa Mahallesi, Turan Emeksiz Sokak No: 1, 06550 Çankaya/Ankara” or by e-mail to the address kvkk@centerragold.com as “signed by secure electronic signature“ or by other means as determined by Personal Data Protection Board.